last executing test programs: 1m53.789084806s ago: executing program 1 (id=17): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="f00fba760004f3ab0f3036deb9800066b9800000c00f326635000400000f300fbf81c5b0e600f20f017e0064f364f30f20160f01cf", 0x35}], 0x1, 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0), 0x2000, 0x0) 1m53.499935947s ago: executing program 1 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/vtconsole/vtcon0/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000100)) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000200)) 1m53.354565899s ago: executing program 1 (id=26): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1m53.27862222s ago: executing program 1 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m53.226755295s ago: executing program 1 (id=28): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xef) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x7e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m52.707038943s ago: executing program 1 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x82) chdir(&(0x7f00000001c0)='./bus\x00') r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}]) 1m52.690050252s ago: executing program 32 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x82) chdir(&(0x7f00000001c0)='./bus\x00') r1 = creat(&(0x7f0000000200)='./file0\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000}]) 1m14.309902394s ago: executing program 0 (id=535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="944cf7", 0x3}], 0x1}, 0x20000010) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m14.05371962s ago: executing program 0 (id=536): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000440)={0x30, 0x30, 0x30}}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) 1m13.989384423s ago: executing program 0 (id=537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x48}}, 0x0) 1m13.826834953s ago: executing program 0 (id=540): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="98ca000000000000000000000000000000000000e9ff09"], 0x18}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1m13.657212786s ago: executing program 0 (id=541): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m13.631618013s ago: executing program 0 (id=542): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x541b, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000285000/0x3000)=nil, 0x3000, 0xd000, 0x7, &(0x7f0000105000/0xd000)=nil) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket(0x1e, 0x4, 0x0) sendfile(r3, r2, 0x0, 0x8010002b) 58.309538407s ago: executing program 33 (id=542): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/dev_snmp6\x00') fchdir(r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$FIONREAD(r1, 0x541b, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000285000/0x3000)=nil, 0x3000, 0xd000, 0x7, &(0x7f0000105000/0xd000)=nil) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket(0x1e, 0x4, 0x0) sendfile(r3, r2, 0x0, 0x8010002b) 54.386961002s ago: executing program 4 (id=680): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)='\x00', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 54.212680293s ago: executing program 4 (id=681): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r0, 0x0, 0x0, 0x200) bpf$LINK_DETACH(0x22, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') 53.966583753s ago: executing program 4 (id=682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 53.813671768s ago: executing program 4 (id=684): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) close(r0) 53.638979851s ago: executing program 4 (id=685): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'fo\x00', 0x0, 0x7f}, 0x2c) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x3, 0x12) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x30}, 0x15, 0x3, 'none\x00', 0x11, 0x2, 0x72}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 53.453866019s ago: executing program 4 (id=687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$netlink(0x10, 0x3, 0x0) memfd_create(0x0, 0x4) 53.371021626s ago: executing program 34 (id=687): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$netlink(0x10, 0x3, 0x0) memfd_create(0x0, 0x4) 1.236403236s ago: executing program 6 (id=1370): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@set_irq_handler={0xc8, 0x20, {0x80, 0x2}}, @uexit={0x0, 0x18, 0xaaaa}], 0x38}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xaaaa) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000100)=0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xfffffffffffffffe) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff) 1.166660131s ago: executing program 2 (id=1371): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) close(0x3) fchdir(r2) stat(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 1.095538454s ago: executing program 6 (id=1372): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r2, &(0x7f0000000180)='nullb1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='my_configfs/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='128\x00', 0x4) write(0xffffffffffffffff, &(0x7f0000000300)='1024\x00', 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='my_configfs/nullb/nullb1/power\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='1\x00', 0x2) 1.095171274s ago: executing program 6 (id=1373): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) read$FUSE(0xffffffffffffffff, &(0x7f0000003b80)={0x2020}, 0x2020) 977.455386ms ago: executing program 2 (id=1375): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x101, 0x1, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff1, 0xa}, {0x1, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 973.104636ms ago: executing program 3 (id=1376): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 886.827311ms ago: executing program 3 (id=1377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240088a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 805.686032ms ago: executing program 5 (id=1378): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500007800000000000190780a010102ac1414aa05009078010000004200000000fc006e9b50cc6e84187600f81414bb440c0001"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) lsetxattr$security_capability(&(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f00000005c0)=@v1={0x1000000, [{0x0, 0x7ff}]}, 0xc, 0x1) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0800c30074e8000008"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x20, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 722.267362ms ago: executing program 3 (id=1379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004e00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x4, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x3) 720.717397ms ago: executing program 5 (id=1380): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) sendmsg$IPSET_CMD_HEADER(r0, 0x0, 0x40012) r1 = fanotify_init(0x60, 0x400) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa202e81dd20000f89000000003000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x94) write$P9_RSYMLINK(r1, &(0x7f0000000340)={0x14, 0x11, 0x0, {0x0, 0x4}}, 0x14) setreuid(0xee00, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f0000000100)="fbffffff", 0x4) 720.083885ms ago: executing program 2 (id=1381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1a}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000324c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 654.894181ms ago: executing program 6 (id=1382): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 654.50743ms ago: executing program 5 (id=1383): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x5, &(0x7f0000000080)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x40}}, 0xc090) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) 516.751615ms ago: executing program 2 (id=1384): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884b", 0x26}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd", 0x8c}, {&(0x7f0000000440)}], 0x3, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000", @ANYRES64, @ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'nicvf0\x00'}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) accept4(r1, &(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000600)=0x80, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 516.46558ms ago: executing program 3 (id=1385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/177, 0xb1}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000001580)=""/4096, 0x1000}], 0x1}}], 0x3ffffffffffff8c, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0672ff1", 0x4, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 445.340548ms ago: executing program 5 (id=1386): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 444.90058ms ago: executing program 2 (id=1387): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000580)=""/103, 0xffffffffffffffda, 0x0, 0x1, 0x2}}, 0x48) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f00000004c0)={{&(0x7f0000000200)=[{0x5, 0x5, 0x7, {0x8, 0x2820}, 0x8, 0x9}, {0xd813, 0x4, 0xffffffffffffffff, {0x3daa, 0x5}, 0x8, 0x1a, 0xf2}], 0x2, 0x40, 0x6, 0x5}, {&(0x7f00000002c0)=[{0x95, 0x9}, {0x2, 0x200}, {0x4b1b, 0x6}, {0x3, 0x1}], 0x4, 0x10, 0x6, 0x2}, {&(0x7f0000000340)=[0x8deb, 0x6], 0x2, 0x8, 0x1000, 0x400}, {&(0x7f0000000400)=[{0x0, 0x7, 0x8, 0x5, 0xca01}, {0x1, 0x100000001, 0x2, 0x8b1, 0x6}], 0x2, 0x28, 0x6}, {&(0x7f0000000480)=[0xd266, 0x4, 0x3], 0x3, 0x8, 0x10, 0x1000}}) getpeername$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x0) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='wcd9390-usbss 0x4', 0x11) 366.50492ms ago: executing program 5 (id=1388): socket$inet_udp(0x2, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 366.089257ms ago: executing program 6 (id=1389): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) listen(r4, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) listen(r2, 0x8200002) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 296.210085ms ago: executing program 6 (id=1390): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000010c0)=@newtclass={0x24, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0xe, 0xfff5}, {0x5, 0xfff2}}}, 0x24}}, 0x10) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 235.06682ms ago: executing program 5 (id=1391): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r3, &(0x7f0000000180)='1\x00', 0x1) 234.769811ms ago: executing program 3 (id=1392): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x0, r2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 175.750236ms ago: executing program 3 (id=1393): mkdir(&(0x7f00000000c0)='./dev\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, &(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000240)="ffffffff00"/24) nanosleep(&(0x7f0000000280)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r1, 0x40982f00, &(0x7f0000000300)="ffffffff0100000000001000000000000300040000000000766f6c3000"/148) mkdir(&(0x7f00000003c0)='./debugfs\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000440)='./debugfs\x00', &(0x7f0000000480)='debugfs\x00', 0x0, &(0x7f00000004c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0) write(r2, &(0x7f0000000540)='1\x00', 0x2) mkdir(&(0x7f0000000580)='./file0\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='ubi0_0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='ubifs\x00', 0x0, &(0x7f0000000680)) 0s ago: executing program 2 (id=1394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) pipe(&(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 75.947100][ T6911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.951053][ T60] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 75.953967][ T6911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.960693][ T6911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.972132][ T60] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 75.976092][ T6911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.991034][ T60] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.011713][ T60] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.031056][ T60] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 76.052642][ T60] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 76.055567][ T60] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 76.067173][ T60] usb 7-1: USB disconnect, device number 3 [ 76.785860][ T6958] netlink: 'syz.2.338': attribute type 13 has an invalid length. [ 76.855732][ T6961] netlink: 64 bytes leftover after parsing attributes in process `syz.4.339'. [ 76.868069][ T6961] syzkaller1: entered promiscuous mode [ 76.870219][ T6961] syzkaller1: entered allmulticast mode [ 77.187584][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 77.198265][ T6974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 77.226360][ T6976] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 77.569236][ T6989] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.573645][ T6989] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.573926][ T6994] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 77.640160][ T6989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.648246][ T6989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.693603][ T7006] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 77.748968][ T6994] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 77.758158][ T7000] bridge0: port 3(syz_tun) entered blocking state [ 77.761547][ T7000] bridge0: port 3(syz_tun) entered disabled state [ 77.764077][ T7000] syz_tun: entered allmulticast mode [ 77.767971][ T7000] syz_tun: entered promiscuous mode [ 77.774177][ T7006] bridge0: port 3(syz_tun) entered blocking state [ 77.776721][ T7006] bridge0: port 3(syz_tun) entered forwarding state [ 77.785105][ T7006] syz_tun: left allmulticast mode [ 77.787575][ T7006] bridge0: port 3(syz_tun) entered disabled state [ 77.881766][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.885751][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.889394][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.893161][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.446760][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 78.467422][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 78.472432][ T7037] netlink: 'syz.4.364': attribute type 30 has an invalid length. [ 78.476060][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 78.482217][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 78.486785][ T7037] netlink: 'syz.4.364': attribute type 30 has an invalid length. [ 78.490663][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 79.097194][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 79.097244][ T42] audit: type=1400 audit(1785747947.960:590): avc: denied { create } for pid=7063 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.116155][ T42] audit: type=1400 audit(1785747947.980:591): avc: denied { setopt } for pid=7063 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.125308][ T42] audit: type=1400 audit(1785747947.990:592): avc: denied { read } for pid=7063 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.178162][ T42] audit: type=1400 audit(1785747948.040:593): avc: denied { write } for pid=7063 comm="syz.3.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.516686][ T42] audit: type=1400 audit(1785747948.380:594): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 79.585746][ T7074] batman_adv: batadv0: Adding interface: dummy0 [ 79.587984][ T7074] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.597336][ T7074] batman_adv: batadv0: Interface activated: dummy0 [ 79.601721][ T42] audit: type=1400 audit(1785747948.470:595): avc: denied { create } for pid=7073 comm="syz.3.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.611281][ T42] audit: type=1400 audit(1785747948.470:596): avc: denied { ioctl } for pid=7073 comm="syz.3.378" path="socket:[20628]" dev="sockfs" ino=20628 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.615292][ T7074] batadv0: mtu less than device minimum [ 79.624640][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.630332][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.635184][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.639136][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.643203][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.648135][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.652670][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.657281][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.662439][ T7074] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.919494][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 79.923313][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 79.974919][ T7086] veth0_macvtap: Caught tx_queue_len zero misconfig [ 80.408168][ T7097] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 80.408168][ T7097] The task syz.0.387 (7097) triggered the difference, watch for misbehavior. [ 80.421727][ T5824] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 80.584446][ T5824] usb 7-1: unable to get BOS descriptor or descriptor too short [ 80.593991][ T5824] usb 7-1: not running at top speed; connect to a high speed hub [ 80.601740][ T5824] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 80.610090][ T5824] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 80.618332][ T5824] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 80.622349][ T5824] usb 7-1: config 14 has no interface number 0 [ 80.624330][ T5824] usb 7-1: config 14 has no interface number 1 [ 80.626232][ T5824] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 80.629625][ T5824] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 80.633462][ T5824] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.637122][ T5824] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 80.640770][ T5824] usb 7-1: config 14 interface 57 has no altsetting 0 [ 80.645514][ T5824] usb 7-1: config 14 interface 228 has no altsetting 0 [ 80.652401][ T5824] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 80.658974][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.661982][ T5824] usb 7-1: Product: syz [ 80.663762][ T5824] usb 7-1: Manufacturer: syz [ 80.665628][ T5824] usb 7-1: SerialNumber: syz [ 80.671444][ T7103] bridge0: port 3(syz_tun) entered blocking state [ 80.677103][ T7103] bridge0: port 3(syz_tun) entered disabled state [ 80.679599][ T7103] syz_tun: entered allmulticast mode [ 80.683153][ T7103] syz_tun: entered promiscuous mode [ 80.685404][ T7103] bridge0: port 3(syz_tun) entered blocking state [ 80.688018][ T7103] bridge0: port 3(syz_tun) entered forwarding state [ 80.707472][ T7103] bridge0: port 3(syz_tun) entered disabled state [ 80.710214][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.714428][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.828204][ T42] audit: type=1400 audit(1785747949.690:597): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 81.083475][ T5824] legousbtower 7-1:14.57: interrupt endpoints not found [ 81.131747][ T42] audit: type=1400 audit(1785747950.000:598): avc: denied { write } for pid=7122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 ÐÓã2#n™êâ÷„L°š>ëÕ‚xžL KY±Þ§ÓŽß?¦Ò:Ÿ>vǬˆçè“Q¹M÷ Lï“ÊKÚ­::xìi½Ã2Ü,ògEØÓÄGÉ &m ‘`H|(?‘˜›8YÕ¯Uºs[ 81.203456][ T42] audit: type=1400 audit(1785747950.070:599): avc: denied { write } for pid=7129 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.485141][ T5824] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 81.501744][ T5824] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 81.774055][ T847] cfg80211: failed to load regulatory.db ÐÓã2#n™êâ÷„L°š>ëÕ‚xžL KY±Þ§ÓŽß?¦Ò:Ÿ>vǬˆçè“Q¹M÷ Lï“ÊKÚ­::xìi½Ã2Ü,ògEØÓÄGÉ &m ‘`H|(?‘˜›8YÕ¯Uºs[ 82.181867][ T7190] __nla_validate_parse: 2 callbacks suppressed [ 82.181899][ T7190] netlink: 52 bytes leftover after parsing attributes in process `syz.4.415'. [ 82.196763][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.200194][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.214340][ T7190] netlink: 76 bytes leftover after parsing attributes in process `syz.4.415'. [ 82.219054][ T7190] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.222384][ T7190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.226011][ T7190] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.229244][ T7190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.246649][ T7190] netlink: 52 bytes leftover after parsing attributes in process `syz.4.415'. [ 82.249022][ T5824] usb 7-1: USB disconnect, device number 4 [ 82.250796][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.254574][ T5842] IPVS: starting estimator thread 0... [ 82.256023][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.260669][ T5824] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 82.371082][ T7193] IPVS: using max 44 ests per chain, 105600 per kthread [ 83.297075][ T7215] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 83.749894][ T7230] syzkaller1: entered promiscuous mode [ 83.752324][ T7230] syzkaller1: entered allmulticast mode [ 84.290975][ T5824] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 84.444855][ T5824] usb 9-1: config 0 has no interfaces? [ 84.446891][ T5824] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 84.450171][ T5824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.454982][ T5824] usb 9-1: config 0 descriptor?? [ 84.612793][ T7242] serio: Serial port ptm0 [ 84.701657][ T3267] usb 9-1: USB disconnect, device number 3 [ 84.834727][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 84.834753][ T42] audit: type=1400 audit(1785747953.700:618): avc: denied { create } for pid=7244 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.845678][ T42] audit: type=1400 audit(1785747953.700:619): avc: denied { bind } for pid=7244 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.853853][ T42] audit: type=1400 audit(1785747953.700:620): avc: denied { listen } for pid=7244 comm="syz.2.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.938679][ T42] audit: type=1400 audit(1785747953.800:621): avc: denied { write } for pid=7248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.015192][ T42] audit: type=1400 audit(1785747953.880:622): avc: denied { write } for pid=7253 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.039463][ T42] audit: type=1400 audit(1785747953.900:623): avc: denied { unlink } for pid=5735 comm="syz-executor" name="file0" dev="tmpfs" ino=568 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 85.109017][ T7257] misc userio: Can't change port extra on an already running userio instance [ 85.115448][ T42] audit: type=1400 audit(1785747953.980:624): avc: denied { write } for pid=7255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.196364][ T42] audit: type=1400 audit(1785747954.060:625): avc: denied { write } for pid=7262 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.293035][ T42] audit: type=1400 audit(1785747954.160:626): avc: denied { write } for pid=7272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.365978][ T42] audit: type=1400 audit(1785747954.230:627): avc: denied { write } for pid=7277 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.813977][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.453'. [ 86.451454][ T7340] Illegal XDP return value 4294967274 on prog (id 38) dev syzkaller1, expect packet loss! [ 86.644795][ T7347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.648538][ T7347] IPv6: NLM_F_CREATE should be set when creating new route [ 86.963558][ T7363] binder: 7362:7363 ioctl c0306201 200000000080 returned -14 [ 86.970278][ T7363] binder: 7362:7363 ioctl c0306201 2000000003c0 returned -14 [ 87.185212][ T7376] bridge0: port 3(wlan1) entered blocking state [ 87.191026][ T7376] bridge0: port 3(wlan1) entered disabled state [ 87.193913][ T7376] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 87.200219][ T7376] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 87.424000][ T7388] Invalid ioctl command number [0 >= 10] [ 87.487095][ T7398] 9pnet_virtio: no channels available for device syz [ 87.608705][ T7408] binder: 7407:7408 ioctl c0306201 200000000080 returned -14 [ 87.614662][ T7408] binder: 7407:7408 ioctl c0306201 2000000003c0 returned -14 [ 87.717915][ T7417] netlink: 'syz.4.492': attribute type 4 has an invalid length. [ 87.728986][ T7417] netlink: 'syz.4.492': attribute type 4 has an invalid length. [ 87.754498][ T7419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.493'. [ 87.786115][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'. [ 87.801339][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 87.829763][ T7423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.495'. [ 87.902793][ T7425] BIDI support in bsg has been removed. [ 88.711111][ T10] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 88.784625][ T7461] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 88.866331][ T10] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 88.869599][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.873175][ T10] usb 9-1: Product: syz [ 88.874926][ T10] usb 9-1: Manufacturer: syz [ 88.876890][ T10] usb 9-1: SerialNumber: syz [ 89.296360][ T10] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 90.041221][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 90.041238][ T42] audit: type=1400 audit(1785747958.910:648): avc: denied { map } for pid=7484 comm="syz.2.518" path="socket:[21499]" dev="sockfs" ino=21499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 90.967023][ T7494] kvm: user requested TSC rate below hardware speed [ 91.183823][ C2] usblp0: nonzero write bulk status received: -71 [ 91.190384][ T5838] usb 9-1: USB disconnect, device number 4 [ 91.198852][ T5838] usblp0: removed [ 91.693581][ T42] audit: type=1400 audit(1785747960.560:649): avc: denied { mount } for pid=7522 comm="syz.3.523" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 91.855905][ T7527] kvm: requested 114819 ns i8254 timer period limited to 200000 ns [ 91.864942][ T7527] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 91.872747][ T7527] kvm: requested 182704 ns i8254 timer period limited to 200000 ns [ 91.879912][ T7527] kvm: requested 22628 ns i8254 timer period limited to 200000 ns [ 91.887484][ T7527] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 91.896567][ T7527] kvm: requested 145828 ns i8254 timer period limited to 200000 ns [ 91.905972][ T7527] kvm: requested 67885 ns i8254 timer period limited to 200000 ns [ 91.913848][ T7527] kvm: requested 145828 ns i8254 timer period limited to 200000 ns [ 91.918750][ T7527] kvm: requested 65371 ns i8254 timer period limited to 200000 ns [ 91.927827][ T7527] kvm: requested 103085 ns i8254 timer period limited to 200000 ns [ 91.951097][ T847] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 92.125099][ T847] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 92.132352][ T847] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 92.147187][ T847] usb 8-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice= 1.00 [ 92.150569][ T847] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.153418][ T847] usb 8-1: Product: syz [ 92.154790][ T847] usb 8-1: Manufacturer: syz [ 92.156437][ T847] usb 8-1: SerialNumber: syz [ 92.165542][ T7523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 92.168798][ T7523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 92.174552][ T847] kl5kusb105 8-1:1.0: KL5KUSB105D / PalmConnect converter detected [ 92.196515][ T847] usb 8-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 92.385076][ T7539] orangefs: client-core tried to read wrong size [ 92.580954][ T42] audit: type=1400 audit(1785747961.440:650): avc: denied { write } for pid=7556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.673483][ T42] audit: type=1400 audit(1785747961.540:651): avc: denied { write } for pid=7563 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.779315][ T42] audit: type=1400 audit(1785747961.640:652): avc: denied { write } for pid=7570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.862517][ T42] audit: type=1400 audit(1785747961.720:653): avc: denied { write } for pid=7573 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.246058][ T42] audit: type=1400 audit(1785747962.110:654): avc: denied { mounton } for pid=7587 comm="syz.0.541" path="/121/file1/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 93.385923][ T5842] usb 8-1: USB disconnect, device number 4 [ 93.400351][ T5842] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 93.405608][ T5842] kl5kusb105 8-1:1.0: device disconnected [ 93.914006][ T42] audit: type=1400 audit(1785747962.780:655): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 93.999381][ T7602] orangefs_devreq_write_iter: failed to copy head. [ 94.076753][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 94.099950][ T42] audit: type=1400 audit(1785747962.960:656): avc: denied { read } for pid=7606 comm="syz.2.547" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.110055][ T42] audit: type=1400 audit(1785747962.960:657): avc: denied { open } for pid=7606 comm="syz.2.547" path="/dev/ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.405039][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 95.405100][ T42] audit: type=1400 audit(1785747964.270:663): avc: denied { read write } for pid=7637 comm="syz.3.562" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 95.415310][ T42] audit: type=1400 audit(1785747964.270:664): avc: denied { open } for pid=7637 comm="syz.3.562" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 95.439609][ T10] playstation 0003:054C:05C4.0003: hidraw0: USB HID v0.01 Device [syz1] on syz1 [ 95.449599][ T10] playstation 0003:054C:05C4.0003: Invalid byte count transferred, expected 16 got 0 [ 95.454129][ T10] playstation 0003:054C:05C4.0003: Failed to retrieve DualShock4 pairing info: -22 [ 95.459292][ T10] playstation 0003:054C:05C4.0003: Failed to get MAC address from DualShock4 [ 95.464603][ T10] playstation 0003:054C:05C4.0003: Failed to create dualshock4. [ 95.473828][ T10] playstation 0003:054C:05C4.0003: probe with driver playstation failed with error -22 [ 95.479660][ T7639] fido_id[7639]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0003:054C:05C4.0003/report_descriptor': No such file or directory [ 95.528175][ T42] audit: type=1400 audit(1785747964.390:665): avc: denied { bind } for pid=7640 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.540927][ T42] audit: type=1400 audit(1785747964.390:666): avc: denied { node_bind } for pid=7640 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 95.596871][ T42] audit: type=1400 audit(1785747964.460:667): avc: denied { bind } for pid=7642 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.600558][ T7643] tipc: Failed to remove unknown binding: 66,0,0/0:3069434845/3069434846 [ 95.612319][ T7643] tipc: Failed to remove unknown binding: 66,0,0/0:3069434845/3069434846 [ 95.652894][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.3.565'. [ 95.697405][ T7645] netlink: 1 bytes leftover after parsing attributes in process `syz.3.565'. [ 96.371157][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 96.522574][ T10] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.527184][ T10] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 96.532670][ T10] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 96.535683][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.538218][ T10] usb 8-1: Product: syz [ 96.539516][ T10] usb 8-1: Manufacturer: syz [ 96.541415][ T10] usb 8-1: SerialNumber: syz [ 96.552855][ T10] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 96.558396][ T10] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 96.565882][ T10] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 97.185471][ T7670] overlayfs: failed to verify origin (161/file1, ino=917, err=-116) [ 97.188325][ T7670] overlayfs: failed to verify origin (161/file1, ino=917, err=-116) [ 97.424510][ T42] audit: type=1400 audit(1785747966.290:668): avc: denied { accept } for pid=7675 comm="syz.4.578" lport=58817 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 98.871194][ T7682] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command, -110 [ 98.896137][ T5824] usb 8-1: USB disconnect, device number 5 [ 98.908159][ T5824] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 98.925890][ T5824] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 98.930321][ T5824] ti_usb_3410_5052 8-1:2.0: device disconnected [ 100.914651][ T7707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.590'. [ 101.005875][ T7711] netlink: 'syz.3.592': attribute type 1 has an invalid length. [ 101.027959][ T7711] bond2: entered promiscuous mode [ 101.034913][ T7711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.063312][ T7711] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 101.068350][ T7711] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 101.074879][ T7711] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 101.083581][ T7711] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 101.108436][ T7715] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 101.113950][ T7715] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 101.119304][ T7715] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 101.344028][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.597'. [ 101.347655][ T7726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.597'. [ 101.407391][ T42] audit: type=1400 audit(1785747970.270:669): avc: denied { watch watch_reads } for pid=7722 comm="syz.4.596" path="/172/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 101.429629][ T7731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.485778][ T7731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.542398][ T7731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.830967][ T5824] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 102.990984][ T5824] usb 8-1: Using ep0 maxpacket: 8 [ 102.994152][ T5824] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 102.997988][ T5824] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 103.001271][ T5824] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.004406][ T5824] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.008415][ T5824] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 103.011439][ T5824] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.217754][ T5824] usb 8-1: GET_CAPABILITIES returned 0 [ 103.220136][ T5824] usbtmc 8-1:16.0: can't read capabilities [ 103.422674][ C2] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 103.426656][ C2] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 103.429633][ C2] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 103.433282][ C2] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 103.436188][ C2] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 103.443654][ T5824] usb 8-1: USB disconnect, device number 6 [ 104.485975][ T7799] netlink: 164 bytes leftover after parsing attributes in process `syz.4.613'. [ 104.920505][ T42] audit: type=1400 audit(1785747973.780:670): avc: denied { write } for pid=7814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.988477][ T42] audit: type=1400 audit(1785747973.850:671): avc: denied { write } for pid=7821 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.165207][ T42] audit: type=1400 audit(1785747974.030:672): avc: denied { write } for pid=7827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.192074][ T42] audit: type=1400 audit(1785747974.060:673): avc: denied { read append } for pid=7832 comm="syz.3.621" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 105.200208][ T42] audit: type=1400 audit(1785747974.060:674): avc: denied { open } for pid=7832 comm="syz.3.621" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 105.207943][ T42] audit: type=1400 audit(1785747974.070:675): avc: denied { ioctl } for pid=7832 comm="syz.3.621" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 105.244313][ T42] audit: type=1400 audit(1785747974.110:676): avc: denied { write } for pid=7834 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.328301][ T42] audit: type=1400 audit(1785747974.190:677): avc: denied { write } for pid=7838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.373857][ T42] audit: type=1400 audit(1785747974.240:678): avc: denied { write } for pid=7844 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.507186][ T7857] binder: 7855:7857 ioctl c0306201 200000000080 returned -14 [ 105.512271][ T7857] binder: 7855:7857 ioctl c0306201 2000000003c0 returned -14 [ 105.561337][ T7862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.627'. [ 105.576164][ T7862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.605458][ T7862] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 105.684554][ T7872] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 105.941250][ T7876] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 105.976290][ T7876] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 105.980917][ T7876] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 105.984356][ T7876] pci 0000:00:01.0: BAR 4 [mem 0x80810000-0x80810fff] [ 105.987149][ T7876] pci 0000:00:01.0: ROM [mem 0x80800000-0x8080ffff pref] [ 105.999792][ T7876] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 106.004036][ T7876] pci 0000:00:01.0: pci_fixup_video+0x0/0x280 took 13323 usecs [ 106.020394][ T7876] pci 0000:00:01.0: Adding to iommu group 1 [ 106.025972][ T7876] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 106.028355][ T7876] pci 0000:00:01.0: vgaarb: bridge control possible [ 106.030439][ T7876] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=mem,locks=none [ 106.044237][ T7876] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 106.050304][ T7876] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 106.058262][ T7876] pci 0000:00:1d.0: Adding to iommu group 7 [ 106.064073][ T7876] pci 0000:00:1d.7: [8086:293a] type 00 class 0x0c0320 conventional PCI endpoint [ 106.069720][ T7876] pci 0000:00:1d.7: BAR 0 [mem 0xfeaf7000-0xfeaf7fff] [ 106.078374][ T7876] pci 0000:00:1d.7: Adding to iommu group 7 [ 106.085314][ T7876] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 106.088051][ T7876] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 106.100502][ T7876] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 106.104093][ T7876] pci 0000:00:1d.7: BAR 0 [mem 0x80801000-0x80801fff]: assigned [ 106.107424][ T7876] pci 0000:00:1d.0: BAR 4 [io 0x2000-0x201f]: assigned [ 106.155711][ T7876] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 106.158151][ T7876] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 106.162025][ T7876] [drm] features: -virgl +edid -resource_blob -host_visible [ 106.162042][ T7876] [drm] features: -context_init -blob_alignment [ 106.173764][ T7876] [drm] number of scanouts: 1 [ 106.175306][ T7876] [drm] number of cap sets: 0 [ 106.189514][ T7876] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 2 [ 106.221314][ T7876] virtio-pci 0000:00:01.0: [drm] fb1: virtio_gpudrmfb frame buffer device [ 106.327745][ T7876] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 94054 usecs [ 106.362261][ T7876] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 106.375194][ T7876] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 106.377925][ T7876] uhci_hcd 0000:00:1d.0: detected 2 ports [ 106.386814][ T7876] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002000 [ 106.394657][ T7876] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 106.398645][ T7876] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 106.401503][ T7876] usb usb1: Product: UHCI Host Controller [ 106.403315][ T7876] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 106.405418][ T7876] usb usb1: SerialNumber: 0000:00:1d.0 [ 106.420357][ T7876] hub 1-0:1.0: USB hub found [ 106.425447][ T7876] hub 1-0:1.0: 2 ports detected [ 106.485007][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.498095][ T7876] pci 0000:00:1d.7: quirk_usb_early_handoff+0x0/0x1360 took 53125 usecs [ 106.684910][ T7898] tipc: Started in network mode [ 106.687192][ T7898] tipc: Node identity aa2e37d9d54b, cluster identity 4711 [ 106.690476][ T7898] tipc: Enabled bearer , priority 0 [ 106.691012][ T9] usb 1-1: new full-speed USB device number 2 using uhci_hcd [ 106.733804][ T7898] syzkaller0: entered promiscuous mode [ 106.736166][ T7898] syzkaller0: entered allmulticast mode [ 106.739374][ T7898] tipc: Resetting bearer [ 106.751385][ T7897] tipc: Resetting bearer [ 106.854627][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 106.899599][ T9] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 106.904046][ T9] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 106.906713][ T9] usb 1-1: Product: QEMU USB Tablet [ 106.908422][ T9] usb 1-1: Manufacturer: QEMU [ 106.910086][ T9] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 107.042959][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb1/1-1/1-1:1.0/0003:0627:0001.0004/input/input10 [ 107.242422][ T9] hid-generic 0003:0627:0001.0004: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 107.354888][ T7514] usb 1-1: USB disconnect, device number 2 [ 107.945452][ T7514] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 108.031204][ T7514] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 2 [ 108.057463][ T7514] ehci-pci 0000:00:1d.7: irq 19, io mem 0x80801000 [ 108.078665][ T7514] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 108.114079][ T7514] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 108.122329][ T7514] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 108.124881][ T7514] usb usb2: Product: EHCI Host Controller [ 108.126713][ T7514] usb usb2: Manufacturer: Linux syzkaller ehci_hcd [ 108.129907][ T7514] usb usb2: SerialNumber: 0000:00:1d.7 [ 108.228975][ T7514] hub 2-0:1.0: USB hub found [ 108.242150][ T7514] hub 2-0:1.0: 6 ports detected [ 108.479992][ T7514] hub 3-0:1.0: USB hub found [ 108.486473][ T7514] hub 3-0:1.0: 2 ports detected [ 108.635503][ T7514] hub 4-0:1.0: USB hub found [ 108.641593][ T7514] hub 4-0:1.0: 2 ports detected [ 108.661376][ T5842] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 108.744824][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.750605][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.761136][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.810406][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.831219][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.838665][ T7514] hub 1-0:1.0: USB hub found [ 108.858416][ T7514] hub 1-0:1.0: 2 ports detected [ 108.858605][ T5842] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 108.869286][ T5742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.876450][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.877160][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 108.888661][ T5742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.892111][ T5842] usb 2-1: Product: QEMU USB Tablet [ 108.894430][ T5842] usb 2-1: Manufacturer: QEMU [ 108.895662][ T5742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.900100][ T5742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.902463][ T5842] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 108.932094][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 108.932412][ T42] audit: type=1400 audit(1785747977.800:689): avc: denied { module_request } for pid=7913 comm="syz-executor" kmod="netdev-nr5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 108.966032][ T5842] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0005/input/input11 [ 109.002339][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'. [ 109.037809][ T7897] tipc: Disabling bearer [ 109.048526][ T5842] hid-generic 0003:0627:0001.0005: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 109.057489][ T24] tipc: Node number set to 2137339865 [ 109.156891][ T7926] syzkaller0: entered promiscuous mode [ 109.161271][ T7926] syzkaller0: entered allmulticast mode [ 109.174859][ T7926] tipc: Enabled bearer , priority 0 [ 109.188373][ T7924] tipc: Resetting bearer [ 109.205577][ T7924] tipc: Disabling bearer [ 109.441321][ T42] audit: type=1400 audit(1785747978.300:690): avc: denied { bpf } for pid=7945 comm="syz.4.651" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.449530][ T42] audit: type=1400 audit(1785747978.300:691): avc: denied { perfmon } for pid=7945 comm="syz.4.651" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 109.477049][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 109.563419][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.565908][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.568264][ T7913] bridge_slave_0: entered allmulticast mode [ 109.571030][ T7913] bridge_slave_0: entered promiscuous mode [ 109.578159][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.581704][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.584680][ T7913] bridge_slave_1: entered allmulticast mode [ 109.587715][ T7913] bridge_slave_1: entered promiscuous mode [ 109.639227][ T7913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.648758][ T7913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.669156][ T42] audit: type=1400 audit(1785747978.530:692): avc: denied { write } for pid=7956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.691897][ T7913] team0: Port device team_slave_0 added [ 109.704824][ T7913] team0: Port device team_slave_1 added [ 109.739639][ T42] audit: type=1400 audit(1785747978.600:693): avc: denied { write } for pid=7959 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.768515][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.774250][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.790907][ T7913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.796330][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.798841][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.807761][ T7913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.834179][ T42] audit: type=1400 audit(1785747978.700:694): avc: denied { write } for pid=7966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.836956][ T7913] hsr_slave_0: entered promiscuous mode [ 109.844671][ T7913] hsr_slave_1: entered promiscuous mode [ 109.847684][ T7913] debugfs: 'hsr0' already exists in 'hsr' [ 109.849593][ T7913] Cannot create hsr debugfs directory [ 109.899529][ T42] audit: type=1400 audit(1785747978.760:695): avc: denied { write } for pid=7947 comm="syz.3.652" name="file0" dev="fuse" ino=16390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 109.918806][ T42] audit: type=1400 audit(1785747978.780:696): avc: denied { write } for pid=7970 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.085606][ T42] audit: type=1400 audit(1785747978.950:697): avc: denied { execmod } for pid=7978 comm="syz.3.659" path="/180/bus/memory.events" dev="overlay" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 110.128859][ T7981] net_ratelimit: 12 callbacks suppressed [ 110.128879][ T7981] 0: reclassify loop, rule prio 0, protocol 03 [ 110.132372][ T7913] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.140508][ T7913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.165350][ T7913] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.171097][ T7913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.176398][ T7913] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.181756][ T7913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.186292][ T7913] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.191461][ T7913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.239159][ T7913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.247678][ T7913] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.249652][ T42] audit: type=1400 audit(1785747979.110:698): avc: denied { set_context_mgr } for pid=7991 comm="syz.3.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 110.259705][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.262020][ T7514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.265516][ T7514] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.267747][ T7514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.472553][ T8009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.667'. [ 110.476195][ T8009] netlink: 144 bytes leftover after parsing attributes in process `syz.2.667'. [ 110.479917][ T8009] netlink: 144 bytes leftover after parsing attributes in process `syz.2.667'. [ 110.558603][ T7913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.657414][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.669'. [ 110.711630][ T8022] bond3: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 110.715358][ T8022] bond3: entered allmulticast mode [ 110.732130][ T8022] ip6erspan0: entered promiscuous mode [ 110.737621][ T8022] ip6erspan0: entered allmulticast mode [ 110.740296][ T8022] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 110.851462][ T8032] syzkaller0: entered promiscuous mode [ 110.853363][ T8032] syzkaller0: entered allmulticast mode [ 110.959662][ T5742] Bluetooth: hci4: command tx timeout [ 111.199819][ T8045] kvm: pic: non byte write [ 111.301090][ T6535] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 111.451024][ T6535] usb 8-1: Using ep0 maxpacket: 32 [ 111.466982][ T6535] usb 8-1: config 2 has an invalid interface number: 194 but max is 0 [ 111.469572][ T6535] usb 8-1: config 2 has no interface number 0 [ 111.471927][ T6535] usb 8-1: config 2 interface 194 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 833 [ 111.475159][ T6535] usb 8-1: config 2 interface 194 altsetting 0 endpoint 0xA has invalid maxpacket 1584, setting to 1024 [ 111.478729][ T6535] usb 8-1: config 2 interface 194 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 111.482573][ T6535] usb 8-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=9c.f6 [ 111.485524][ T6535] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.491703][ T8044] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 111.494023][ T8044] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 112.269322][ T8061] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 112.889078][ T6535] usb 8-1: string descriptor 0 read error: -71 [ 112.898455][ T6535] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.905514][ T7913] veth0_vlan: entered promiscuous mode [ 112.929244][ T7913] veth1_vlan: entered promiscuous mode [ 112.969464][ T7913] veth0_macvtap: entered promiscuous mode [ 112.986668][ T7913] veth1_macvtap: entered promiscuous mode [ 113.015205][ T6535] usb 8-1: USB disconnect, device number 7 [ 113.017373][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.020990][ T5742] Bluetooth: hci4: command tx timeout [ 113.032413][ T7913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.102033][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.115055][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.122681][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.160352][ T7510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.163742][ T7510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.171010][ T5839] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.183629][ T7510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.188807][ T7510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.251022][ T50] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 113.420964][ T50] usb 7-1: Using ep0 maxpacket: 16 [ 113.426717][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.432807][ T50] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 113.436019][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.438790][ T50] usb 7-1: Product: syz [ 113.440422][ T50] usb 7-1: Manufacturer: syz [ 113.443395][ T50] usb 7-1: SerialNumber: syz [ 113.448371][ T50] usb 7-1: config 0 descriptor?? [ 113.458088][ T50] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 113.461404][ T50] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 113.568928][ T8091] netlink: 'syz.3.690': attribute type 1 has an invalid length. [ 113.611738][ T8091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.614347][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.617605][ T8091] bond3: (slave bond4): making interface the new active one [ 113.622262][ T8091] bond3: (slave bond4): Enslaving as an active interface with an up link [ 113.622288][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.630393][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.634885][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.639450][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 113.663724][ T8091] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 113.683600][ T8091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.690'. [ 113.687775][ T8091] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.071057][ T50] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 114.079491][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.083318][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.086512][ T8094] bridge_slave_0: entered allmulticast mode [ 114.090231][ T8094] bridge_slave_0: entered promiscuous mode [ 114.095453][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.098454][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.101853][ T8094] bridge_slave_1: entered allmulticast mode [ 114.106524][ T8094] bridge_slave_1: entered promiscuous mode [ 114.134603][ T8094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.142330][ T8094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.173160][ T8094] team0: Port device team_slave_0 added [ 114.178199][ T8094] team0: Port device team_slave_1 added [ 114.203614][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.206439][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.216936][ T8094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.223910][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.226746][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.237260][ T8094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.286528][ T8094] hsr_slave_0: entered promiscuous mode [ 114.289941][ T8094] hsr_slave_1: entered promiscuous mode [ 114.293361][ T8094] debugfs: 'hsr0' already exists in 'hsr' [ 114.295788][ T8094] Cannot create hsr debugfs directory [ 114.510436][ T8094] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 114.513335][ T50] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 114.515797][ T8094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.517730][ T50] em28xx 7-1:0.0: board has no eeprom [ 114.522306][ T8094] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 114.528523][ T8094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.532234][ T8094] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 114.538525][ T8094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.541436][ T8094] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 114.547163][ T8094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.568303][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.572173][ T8094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.574798][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.577162][ T8094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.613809][ T8094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.626056][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.629865][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.644402][ T8094] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.656598][ T8124] binder: 8123:8124 ioctl c0306201 200000000080 returned -14 [ 114.661697][ T7510] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.662341][ T8124] binder: 8123:8124 ioctl c0306201 2000000003c0 returned -14 [ 114.664687][ T7510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.675959][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.678208][ T7516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.714677][ T8126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.694'. [ 114.973282][ T8094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.112473][ T5742] Bluetooth: hci4: command tx timeout [ 115.162996][ T8094] veth0_vlan: entered promiscuous mode [ 115.169652][ T8094] veth1_vlan: entered promiscuous mode [ 115.196721][ T8094] veth0_macvtap: entered promiscuous mode [ 115.205781][ T8094] veth1_macvtap: entered promiscuous mode [ 115.216419][ T8094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.224556][ T8094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.262767][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.279375][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.312970][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.317356][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.343971][ T7514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.348079][ T7514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.371006][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.374596][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.418639][ T8148] tipc: Started in network mode [ 115.420692][ T8148] tipc: Node identity 1000001, cluster identity 4369 [ 115.423686][ T8148] tipc: Node number set to 16777217 [ 115.426487][ T8148] tipc: Cannot configure node identity twice [ 115.433834][ T8148] tipc: New replicast peer: 127.0.0.1 [ 115.438078][ T8148] tipc: Enabled bearer , priority 10 [ 115.485543][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 115.485563][ T42] audit: type=1400 audit(1785747984.350:716): avc: denied { bind } for pid=8149 comm="syz.6.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 115.498037][ T42] audit: type=1400 audit(1785747984.360:717): avc: denied { write } for pid=8149 comm="syz.6.696" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 115.586397][ T8076] em28xx 7-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 115.615417][ T8152] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 115.641003][ T50] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 115.644381][ T50] em28xx 7-1:0.0: dvb set to bulk mode. [ 115.647216][ T5438] em28xx 7-1:0.0: Binding DVB extension [ 115.661439][ T5742] Bluetooth: hci0: command tx timeout [ 115.676177][ T50] usb 7-1: USB disconnect, device number 5 [ 115.686596][ T50] em28xx 7-1:0.0: Disconnecting em28xx [ 115.704730][ T8156] loop5: detected capacity change from 0 to 7 [ 115.716960][ T5438] em28xx 7-1:0.0: Registering input extension [ 115.721557][ T50] em28xx 7-1:0.0: Closing input extension [ 115.792149][ T50] em28xx 7-1:0.0: Freeing device [ 116.001045][ T5824] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 116.156414][ T5824] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.163507][ T5824] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 116.170158][ T5824] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 116.174400][ T5824] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.177871][ T5824] usb 11-1: Product: syz [ 116.179696][ T5824] usb 11-1: Manufacturer: syz [ 116.182677][ T5824] usb 11-1: SerialNumber: syz [ 116.195600][ T5824] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 116.204739][ T5824] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 116.211705][ T5824] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 117.038350][ T8194] netlink: 88 bytes leftover after parsing attributes in process `syz.5.713'. [ 117.164241][ T8202] binder: 8201:8202 ioctl c0306201 200000000080 returned -14 [ 117.169643][ T8202] binder: 8201:8202 ioctl c0306201 2000000003c0 returned -14 [ 117.191076][ T5742] Bluetooth: hci4: command tx timeout [ 117.341300][ T50] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 117.448365][ T8210] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 117.453471][ T8210] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 117.514329][ T50] usb 7-1: config 1 interface 2 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 117.519335][ T50] usb 7-1: config 1 interface 2 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 117.527818][ T50] usb 7-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 0.00 [ 117.531081][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.534244][ T50] usb 7-1: Product: syz [ 117.536158][ T50] usb 7-1: Manufacturer: syz [ 117.538192][ T50] usb 7-1: SerialNumber: syz [ 117.572081][ T42] audit: type=1400 audit(1785747986.440:718): avc: denied { ioctl } for pid=8212 comm="syz.3.721" path="socket:[27551]" dev="sockfs" ino=27551 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 117.714839][ T50] usb 7-1: reset high-speed USB device number 6 using dummy_hcd [ 117.751229][ T5742] Bluetooth: hci0: command tx timeout [ 118.541165][ T8158] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 118.545203][ T8158] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 118.547426][ T8158] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 118.550617][ T8158] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 118.558272][ T6535] usb 11-1: USB disconnect, device number 2 [ 118.572082][ T6535] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 118.584283][ T6535] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 118.588566][ T6535] ti_usb_3410_5052 11-1:2.0: device disconnected [ 119.081250][ T6535] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 119.124155][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz.6.730'. [ 119.147933][ T8242] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8242 comm=syz.6.730 [ 119.234416][ T6535] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.242635][ T6535] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 119.245637][ T6535] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 119.248227][ T6535] usb 10-1: Product: syz [ 119.249644][ T6535] usb 10-1: Manufacturer: syz [ 119.251846][ T6535] usb 10-1: SerialNumber: syz [ 119.338981][ T8249] binder_alloc: 8248: binder_alloc_buf size -16 failed, no address space [ 119.347290][ T8249] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 119.436170][ T42] audit: type=1400 audit(1785747988.300:719): avc: denied { watch } for pid=8252 comm="syz.3.734" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 119.448103][ T8251] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 5429, magic 54 != 6b] [ 119.452383][ T42] audit: type=1400 audit(1785747988.300:720): avc: denied { watch_sb watch_reads } for pid=8252 comm="syz.3.734" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 119.468983][ T6535] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 119.687603][ T8266] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 119.691684][ T8266] block device autoloading is deprecated and will be removed. [ 119.699897][ T8261] md: md130 stopped. [ 119.735923][ T5882] usb 10-1: USB disconnect, device number 2 [ 119.763209][ T5882] usblp0: removed [ 119.798786][ T8269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.804761][ T50] usb 7-1: [UEAGLE-ATM] urb submission failed with error -19 [ 119.807229][ T50] ueagle-atm 7-1:1.0: usbatm_usb_probe: bind failed: -19! [ 119.818600][ T50] usb 7-1: USB disconnect, device number 6 [ 119.822561][ T5742] Bluetooth: hci0: command tx timeout [ 120.247010][ T8274] syzkaller0: entered promiscuous mode [ 120.249327][ T8274] syzkaller0: entered allmulticast mode [ 120.307487][ T8276] binder: 8275:8276 ioctl c0306201 200000000180 returned -14 [ 120.662714][ T8285] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.896808][ T8288] md: superblock version 12389 not known [ 120.905772][ T8288] md: couldn't set array info. -22 [ 121.052698][ T8297] 0: reclassify loop, rule prio 0, protocol 03 [ 121.189326][ T8301] Bluetooth: (null): Invalid header checksum [ 121.556161][ T42] audit: type=1400 audit(1785747990.420:721): avc: denied { mount } for pid=8315 comm="syz.2.760" name="/" dev="ramfs" ino=29940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 121.857600][ T42] audit: type=1400 audit(1785747990.720:722): avc: denied { append } for pid=8334 comm="syz.5.767" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 121.904749][ T5742] Bluetooth: hci0: command tx timeout [ 121.943375][ T8335] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 121.950995][ T8335] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 121.978415][ T8335] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 121.993451][ T8335] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.996183][ T8335] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.006810][ T8335] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.099819][ T8344] netlink: 'syz.5.769': attribute type 1 has an invalid length. [ 122.116327][ T8344] vlan2: entered allmulticast mode [ 122.118255][ T8344] macsec0: entered allmulticast mode [ 122.120495][ T8344] veth1_macvtap: entered allmulticast mode [ 122.238732][ T8352] netlink: 'syz.5.774': attribute type 39 has an invalid length. [ 122.280025][ T8353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.283466][ T8353] batadv_slave_1: entered promiscuous mode [ 122.487827][ T8360] syzkaller0: entered promiscuous mode [ 122.489951][ T8360] syzkaller0: entered allmulticast mode [ 123.255475][ T8383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8383 comm=syz.6.785 [ 123.263826][ T8383] netlink: 'syz.6.785': attribute type 3 has an invalid length. [ 123.267406][ T8383] netlink: 'syz.6.785': attribute type 3 has an invalid length. [ 123.334213][ T8381] kvm: pic: non byte read [ 123.337053][ T8381] kvm: pic: non byte read [ 123.340030][ T8381] kvm: pic: non byte read [ 123.348515][ T8381] kvm: pic: non byte read [ 123.351694][ T8381] kvm: pic: non byte read [ 123.355248][ T8381] kvm: pic: non byte read [ 123.445597][ T5742] Bluetooth: hci0: unexpected event for opcode 0x040d [ 123.888533][ T8423] Bluetooth: (null): Non-link packet received in non-active state [ 123.953557][ T42] audit: type=1400 audit(1785747992.820:723): avc: denied { read write } for pid=8426 comm="syz.2.802" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 123.963964][ T42] audit: type=1400 audit(1785747992.820:724): avc: denied { open } for pid=8426 comm="syz.2.802" path="/197/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 123.978353][ T42] audit: type=1400 audit(1785747992.840:725): avc: denied { ioctl } for pid=8426 comm="syz.2.802" path="/197/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 123.995921][ T5742] Bluetooth: hci4: command 0x0c1a tx timeout [ 124.054335][ T8431] binder_alloc: 8430: binder_alloc_buf size 24560 failed, no address space [ 124.060028][ T8431] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 124.112780][ T42] audit: type=1400 audit(1785747992.980:726): avc: denied { read } for pid=8434 comm="syz.2.806" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.119993][ T42] audit: type=1400 audit(1785747992.980:727): avc: denied { open } for pid=8434 comm="syz.2.806" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.130188][ T42] audit: type=1400 audit(1785747992.980:728): avc: denied { ioctl } for pid=8434 comm="syz.2.806" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 124.188612][ T42] audit: type=1400 audit(1785747993.050:729): avc: denied { write } for pid=8434 comm="syz.2.806" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 124.532946][ T42] audit: type=1400 audit(1785747993.400:730): avc: denied { write } for pid=8444 comm="syz.5.810" name="/" dev="9p" ino=78395257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.633355][ T8449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.814'. [ 124.709022][ T8449] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8449 comm=syz.2.814 [ 124.788495][ T8458] syzkaller0: entered promiscuous mode [ 124.790317][ T8458] syzkaller0: entered allmulticast mode [ 124.805821][ T8458] tipc: Started in network mode [ 124.808097][ T8458] tipc: Node identity 0afd5dab8c63, cluster identity 4711 [ 124.812393][ T8458] tipc: Enabled bearer , priority 0 [ 124.821460][ T8456] tipc: Resetting bearer [ 124.830417][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.816'. [ 124.838690][ T8456] tipc: Disabling bearer [ 126.061555][ T5742] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.154306][ T8526] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 126.192742][ T8526] 8021q: adding VLAN 0 to HW filter on device bond5 [ 126.224185][ T8526] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 126.239435][ T8530] bridge1: port 1(macvlan2) entered blocking state [ 126.245184][ T8530] bridge1: port 1(macvlan2) entered disabled state [ 126.251249][ T8530] macvlan2: entered allmulticast mode [ 126.324212][ T8537] binder: 8536:8537 ioctl c0306201 200000000180 returned -14 [ 126.421926][ T8543] binder: 8542:8543 ioctl c0306201 200000004a40 returned -22 [ 126.522829][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.6.847'. [ 126.667058][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 126.667088][ T42] audit: type=1400 audit(1785747995.530:745): avc: denied { append } for pid=8558 comm="syz.6.850" name="cec0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.685691][ T8559] Bluetooth: MGMT ver 1.23 [ 126.878208][ T42] audit: type=1400 audit(1785747995.740:746): avc: denied { ioctl } for pid=8566 comm="syz.3.853" path="socket:[31271]" dev="sockfs" ino=31271 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 126.951846][ T42] audit: type=1400 audit(1785747995.820:747): avc: denied { write } for pid=8569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.014923][ T42] audit: type=1400 audit(1785747995.880:748): avc: denied { write } for pid=8572 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.032638][ T8574] syzkaller0: entered promiscuous mode [ 127.038854][ T8574] syzkaller0: entered allmulticast mode [ 127.101283][ T42] audit: type=1400 audit(1785747995.960:749): avc: denied { write } for pid=8576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.174623][ T42] audit: type=1400 audit(1785747996.040:750): avc: denied { write } for pid=8582 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.195217][ T42] audit: type=1400 audit(1785747996.060:751): avc: denied { write } for pid=8583 comm="syz.3.856" name="configs" dev="configfs" ino=11613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.208848][ T42] audit: type=1400 audit(1785747996.070:752): avc: denied { write } for pid=8583 comm="syz.3.856" name="functions" dev="configfs" ino=11612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.846442][ T8606] binder_alloc: 8605: pid 8605 spamming oneway? 1 buffers allocated for a total size of 4096 [ 127.920592][ T42] audit: type=1400 audit(1785747996.780:753): avc: denied { setopt } for pid=8607 comm="syz.6.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 127.941893][ T42] audit: type=1400 audit(1785747996.790:754): avc: denied { write } for pid=8607 comm="syz.6.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 128.141054][ T5742] Bluetooth: hci4: command 0x0c1a tx timeout [ 128.342572][ T5817] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 128.494112][ T8627] binder: 8626:8627 ioctl c0306201 200000000080 returned -14 [ 128.499030][ T8627] binder: 8626:8627 ioctl c0306201 2000000003c0 returned -14 [ 128.502758][ T5817] usb 11-1: Using ep0 maxpacket: 8 [ 128.508435][ T5817] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 128.512814][ T5817] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 128.517280][ T5817] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.522907][ T5817] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.530923][ T5817] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.537741][ T5817] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.541956][ T5817] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 128.546159][ T5817] usb 11-1: config 168 interface 0 has no altsetting 0 [ 128.550114][ T5817] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 128.552976][ T5817] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 128.556519][ T5817] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.560362][ T5817] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.564739][ T5817] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.568805][ T5817] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.573669][ T5817] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 128.577504][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.874'. [ 128.578878][ T5817] usb 11-1: config 168 interface 0 has no altsetting 0 [ 128.582384][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.874'. [ 128.586546][ T5817] usb 11-1: config 168 descriptor has 1 excess byte, ignoring [ 128.590027][ T5817] usb 11-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 128.594843][ T5817] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 128.599059][ T5817] usb 11-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 128.604669][ T5817] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 128.609043][ T5817] usb 11-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 128.614003][ T5817] usb 11-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 128.615801][ T8633] syzkaller0: entered promiscuous mode [ 128.620394][ T5817] usb 11-1: config 168 interface 0 has no altsetting 0 [ 128.620762][ T8633] syzkaller0: entered allmulticast mode [ 128.627157][ T5817] usb 11-1: string descriptor 0 read error: -22 [ 128.630313][ T5817] usb 11-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 128.634692][ T5817] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.675478][ T5817] adutux 11-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 128.784499][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 128.820837][ T8646] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 128.823399][ T8646] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.828825][ T8646] vhci_hcd vhci_hcd.0: Device attached [ 128.897051][ T8648] vhci_hcd: connection closed [ 128.903192][ T5839] vhci_hcd vhci_hcd.3: stop threads [ 128.911637][ T5839] vhci_hcd vhci_hcd.3: release socket [ 128.914192][ T5839] vhci_hcd vhci_hcd.3: disconnect device [ 129.531101][ T8660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 129.967705][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.888'. [ 129.976526][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.888'. [ 130.426952][ T8700] netlink: 'syz.3.898': attribute type 1 has an invalid length. [ 130.476040][ T8700] 8021q: adding VLAN 0 to HW filter on device bond6 [ 130.491265][ T8703] netlink: 'syz.5.899': attribute type 11 has an invalid length. [ 130.516608][ T8700] bond6: (slave veth7): Enslaving as an active interface with a down link [ 130.553576][ T8700] batman_adv: batadv0: Interface deactivated: dummy0 [ 130.566070][ T8700] batman_adv: batadv0: Removing interface: dummy0 [ 130.576451][ T8700] bond6: (slave dummy0): making interface the new active one [ 130.580012][ T8700] dummy0: entered promiscuous mode [ 130.583822][ T8700] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 130.593069][ T8700] netlink: 'syz.3.898': attribute type 10 has an invalid length. [ 130.596237][ T8700] netlink: 40 bytes leftover after parsing attributes in process `syz.3.898'. [ 130.698582][ T8700] bond6: (slave dummy0): Releasing active interface [ 130.880249][ T8717] syzkaller0: entered promiscuous mode [ 130.882229][ T8717] syzkaller0: entered allmulticast mode [ 131.249158][ T8736] binder: 8735:8736 ioctl c0306201 0 returned -14 [ 131.304674][ T8739] binder: 8738:8739 ioctl c0306201 200000000080 returned -14 [ 131.311243][ T8739] binder: 8738:8739 ioctl c0306201 2000000003c0 returned -14 [ 131.342467][ T5838] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 131.491079][ T5838] usb 10-1: Using ep0 maxpacket: 8 [ 131.494995][ T5838] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.499202][ T5838] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 131.502314][ T5838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.506368][ T5838] usb 10-1: config 0 descriptor?? [ 131.708318][ T8752] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 131.729299][ T5838] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 131.913000][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 131.913012][ T42] audit: type=1400 audit(1785748000.780:762): avc: denied { write } for pid=8758 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.932093][ T5838] usb 10-1: USB disconnect, device number 3 [ 131.995937][ T42] audit: type=1400 audit(1785748000.860:763): avc: denied { write } for pid=8763 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.061372][ T8770] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 132.123897][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.922'. [ 132.136887][ T42] audit: type=1400 audit(1785748001.000:764): avc: denied { write } for pid=8775 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.141674][ T8777] 8021q: adding VLAN 0 to HW filter on device bond7 [ 132.197750][ T8777] bond5: (slave veth0_to_bond): Releasing backup interface [ 132.215506][ T8777] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 132.244660][ T42] audit: type=1400 audit(1785748001.110:765): avc: denied { write } for pid=8782 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.359084][ T8788] fuse: fd is not a fuse device [ 132.396923][ T42] audit: type=1400 audit(1785748001.260:766): avc: denied { write } for pid=8789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.476593][ T42] audit: type=1400 audit(1785748001.340:767): avc: denied { write } for pid=8792 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.548847][ T42] audit: type=1400 audit(1785748001.410:768): avc: denied { write } for pid=8798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.630039][ T42] audit: type=1400 audit(1785748001.490:769): avc: denied { write } for pid=8801 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.720909][ T42] audit: type=1400 audit(1785748001.580:770): avc: denied { write } for pid=8807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.760556][ T8812] binder: 8811:8812 ioctl c0306201 2000000004c0 returned -14 [ 132.791898][ T42] audit: type=1400 audit(1785748001.660:771): avc: denied { write } for pid=8813 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.889431][ T8818] netlink: 24 bytes leftover after parsing attributes in process `syz.3.931'. [ 132.944492][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.946700][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.998409][ T8822] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8822 comm=syz.3.931 [ 133.002038][ T8821] event trace: Could not enable event p [ 133.005701][ T8802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.112800][ T8824] tipc: Failed to remove unknown binding: 66,0,0/16777217:3064206093/3064206095 [ 133.116255][ T8824] tipc: Failed to remove unknown binding: 66,0,0/16777217:3064206093/3064206094 [ 133.122277][ T8824] tipc: Failed to remove unknown binding: 66,0,0/16777217:3064206093/3064206095 [ 133.132652][ T8824] tipc: Failed to remove unknown binding: 66,0,0/16777217:3064206093/3064206094 [ 133.163271][ T8826] fuse: fd is not a fuse device [ 133.314305][ T8835] ip6gre1: entered promiscuous mode [ 133.316570][ T8835] ip6gre1: entered allmulticast mode [ 133.747457][ T8852] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8852 comm=syz.5.944 [ 133.753086][ T8852] netlink: 'syz.5.944': attribute type 12 has an invalid length. [ 133.755810][ T8852] netlink: 'syz.5.944': attribute type 29 has an invalid length. [ 133.758882][ T8852] netlink: 148 bytes leftover after parsing attributes in process `syz.5.944'. [ 133.762309][ T8852] netlink: 'syz.5.944': attribute type 1 has an invalid length. [ 133.765095][ T8852] netlink: 'syz.5.944': attribute type 2 has an invalid length. [ 133.768203][ T8852] netlink: 11 bytes leftover after parsing attributes in process `syz.5.944'. [ 134.464768][ T8883] i2c i2c-0: delete_device: Can't find device in list [ 134.723358][ T8900] netlink: 'syz.3.964': attribute type 1 has an invalid length. [ 134.770089][ T8900] bond8: (slave bridge3): Enslaving as a backup interface with an up link [ 134.789450][ T8900] bond8: (slave bridge4): Enslaving as a backup interface with a down link [ 136.575298][ T8966] netlink: 40 bytes leftover after parsing attributes in process `syz.5.985'. [ 136.593533][ T8966] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 136.610583][ T8966] netlink: 40 bytes leftover after parsing attributes in process `syz.5.985'. [ 136.613688][ T8966] bond1: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 136.658292][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.987'. [ 136.676955][ T8972] netlink: 24 bytes leftover after parsing attributes in process `syz.5.987'. [ 137.076330][ T8994] fuse: fd is not a fuse device [ 137.261255][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.388802][ T9001] syzkaller0: entered promiscuous mode [ 137.393310][ T9001] syzkaller0: entered allmulticast mode [ 137.406337][ T9003] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 137.485013][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 137.485035][ T42] audit: type=1400 audit(1785748006.350:783): avc: denied { write } for pid=9007 comm="syz.5.1000" name="functions" dev="configfs" ino=11612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 137.601249][ T64] Bluetooth: hci4: hardware error 0x00 [ 137.740460][ T9019] syz_tun: left promiscuous mode [ 137.886308][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 137.892185][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 137.897478][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 137.905550][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 137.911563][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 137.916806][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 137.925593][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 137.930640][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 137.947504][ T9033] fuse: fd is not a fuse device [ 138.001712][ T9029] selinux_netlink_send: 220 callbacks suppressed [ 138.001732][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 138.008927][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 138.014321][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 138.019578][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 138.026198][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 138.032154][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 138.037597][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 138.042902][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 138.049448][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 138.055424][ T9029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9029 comm=syz.2.1010 [ 138.475438][ T9050] syzkaller0: entered promiscuous mode [ 138.477719][ T9050] syzkaller0: entered allmulticast mode [ 139.163697][ T9062] mmap: syz.6.1018 (9062) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.251942][ T9063] fsl-ehci serial8250: No platform data for serial8250. [ 139.341392][ T5742] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.438093][ T9077] 0: reclassify loop, rule prio 0, protocol 03 [ 139.666583][ T64] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 139.782600][ T42] audit: type=1400 audit(1785748008.650:784): avc: denied { write } for pid=9098 comm="syz.2.1030" name="strings" dev="configfs" ino=11614 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.798469][ T42] audit: type=1400 audit(1785748008.660:785): avc: denied { write } for pid=9098 comm="syz.2.1030" name="0x409" dev="configfs" ino=33631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.832983][ T42] audit: type=1400 audit(1785748008.700:786): avc: denied { create } for pid=9098 comm="syz.2.1030" name="serialnumber" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 139.850439][ T42] audit: type=1400 audit(1785748008.710:787): avc: denied { write } for pid=9098 comm="syz.2.1030" name="uncompressed" dev="configfs" ino=11633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.881765][ T42] audit: type=1400 audit(1785748008.750:788): avc: denied { write } for pid=9098 comm="syz.2.1030" name="yuyv" dev="configfs" ino=34224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.891297][ T9109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.895334][ T42] audit: type=1400 audit(1785748008.750:789): avc: denied { write } for pid=9098 comm="syz.2.1030" name="720p" dev="configfs" ino=35178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.949166][ T9109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.007623][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.244926][ T9122] lo: Caught tx_queue_len zero misconfig [ 140.345903][ T9125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1039'. [ 140.411126][ T9125] bridge1: port 1(veth3) entered blocking state [ 140.413750][ T9125] bridge1: port 1(veth3) entered disabled state [ 140.416572][ T9125] veth3: entered allmulticast mode [ 140.424006][ T9125] veth3: entered promiscuous mode [ 140.449505][ T9125] bridge1: port 2(veth0_to_bond) entered blocking state [ 140.454465][ T9125] bridge1: port 2(veth0_to_bond) entered disabled state [ 140.458635][ T9125] veth0_to_bond: entered allmulticast mode [ 140.463950][ T9125] veth0_to_bond: entered promiscuous mode [ 141.278129][ T9137] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1044'. [ 141.297613][ T9137] team0: Port device vlan2 removed [ 141.421919][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.203384][ T9173] tipc: New replicast peer: 255.255.255.255 [ 142.207591][ T9173] tipc: Enabled bearer , priority 10 [ 142.832316][ T9181] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 142.914434][ T9183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1061'. [ 143.105451][ T42] audit: type=1804 audit(1785748011.970:790): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1065" name="file0" dev="tmpfs" ino=1664 res=1 errno=0 [ 143.108432][ T9193] uprobe: syz.3.1065:9193 failed to unregister, leaking uprobe [ 143.315065][ T9202] xt_CT: No such helper "netbios-ns" [ 143.321014][ T5824] tipc: Node number set to 2016535388 [ 143.653839][ T9220] syzkaller0: entered promiscuous mode [ 143.656276][ T9220] syzkaller0: entered allmulticast mode [ 143.801952][ T42] audit: type=1400 audit(1785748012.660:791): avc: denied { ioctl } for pid=9227 comm="syz.3.1077" path="socket:[35378]" dev="sockfs" ino=35378 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.948833][ T9249] netlink: 'syz.5.1088': attribute type 1 has an invalid length. [ 144.029759][ T9249] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.035488][ T9249] bond2: (slave bond3): making interface the new active one [ 144.040441][ T9249] bond2: (slave bond3): Enslaving as an active interface with an up link [ 144.081356][ T9249] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 144.379436][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1089'. [ 144.421622][ T5839] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.437158][ T5839] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.449141][ T5839] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.455482][ T5839] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.530292][ T9279] vlan3: entered promiscuous mode [ 144.532249][ T9279] hsr0: entered promiscuous mode [ 144.534133][ T9279] vlan3: entered allmulticast mode [ 144.535907][ T9279] hsr0: entered allmulticast mode [ 144.537569][ T9279] hsr_slave_0: entered allmulticast mode [ 144.539426][ T9279] hsr_slave_1: entered allmulticast mode [ 144.646081][ T9284] fuse: fd is not a fuse device [ 145.006703][ T42] audit: type=1400 audit(1785748013.870:792): avc: denied { create } for pid=9291 comm="syz.6.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 145.381486][ T42] audit: type=1326 audit(1785748014.250:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.5.1098" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688679e019 code=0x7ffc0000 [ 145.393348][ T42] audit: type=1326 audit(1785748014.250:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.5.1098" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688679e019 code=0x7ffc0000 [ 145.411514][ T42] audit: type=1326 audit(1785748014.250:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.5.1098" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688679e019 code=0x7ffc0000 [ 145.420289][ T42] audit: type=1326 audit(1785748014.250:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.5.1098" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f688679e019 code=0x7ffc0000 [ 145.439962][ T42] audit: type=1326 audit(1785748014.300:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.5.1098" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688679e019 code=0x7ffc0000 [ 145.450941][ T42] audit: type=1326 audit(1785748014.300:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.5.1098" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688679e019 code=0x7ffc0000 [ 145.459341][ T42] audit: type=1326 audit(1785748014.300:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9296 comm="syz.5.1098" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688679e019 code=0x7ffc0000 [ 145.583620][ T9309] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 145.740808][ T9323] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1105'. [ 145.759331][ T9323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.790650][ T9323] bond1: (slave veth3): Enslaving as an active interface with an up link [ 145.815011][ T9323] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 145.968373][ T9340] syz_tun: entered allmulticast mode [ 145.971279][ T9340] lo: entered allmulticast mode [ 145.973970][ T9339] syz_tun: left allmulticast mode [ 146.418774][ T9363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1115'. [ 146.437527][ T9363] tipc: Started in network mode [ 146.439477][ T9363] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 146.445157][ T9363] tipc: Enabled bearer , priority 10 [ 146.495124][ T9368] capability: warning: `syz.5.1117' uses deprecated v2 capabilities in a way that may be insecure [ 146.647367][ T9375] syzkaller0: entered promiscuous mode [ 146.649781][ T9375] syzkaller0: entered allmulticast mode [ 147.030640][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1127'. [ 147.061891][ T9395] bond4: entered promiscuous mode [ 147.064143][ T9395] bond4: entered allmulticast mode [ 147.420346][ T9407] syzkaller0: entered promiscuous mode [ 147.422983][ T9407] syzkaller0: entered allmulticast mode [ 147.451058][ T6535] tipc: Node number set to 1 [ 147.661093][ T50] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 147.821006][ T50] usb 10-1: Using ep0 maxpacket: 8 [ 147.832056][ T50] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 147.842549][ T50] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 147.858660][ T50] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 147.870494][ T50] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 147.874604][ T50] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 147.877907][ T50] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.882369][ T50] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.885538][ T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.100310][ T50] usb 10-1: GET_CAPABILITIES returned 0 [ 148.102604][ T50] usbtmc 10-1:16.0: can't read capabilities [ 148.310819][ T847] usb 10-1: USB disconnect, device number 4 [ 148.414899][ T9430] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=384 (768 ns) > initial count (6 ns). Using initial count to start timer. [ 148.749016][ T9445] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 149.092284][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 149.092307][ T42] audit: type=1400 audit(1785748017.960:823): avc: denied { bind } for pid=9451 comm="syz.2.1147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.103257][ T42] audit: type=1400 audit(1785748017.960:824): avc: denied { name_bind } for pid=9451 comm="syz.2.1147" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 149.117320][ T42] audit: type=1400 audit(1785748017.960:825): avc: denied { node_bind } for pid=9451 comm="syz.2.1147" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 149.497605][ T9473] fuse: fd is not a fuse device [ 149.966511][ T42] audit: type=1400 audit(1785748018.830:826): avc: denied { map } for pid=9491 comm="syz.3.1160" path="socket:[38928]" dev="sockfs" ino=38928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 150.811966][ T42] audit: type=1400 audit(1785748019.680:827): avc: denied { create } for pid=9497 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 150.819980][ T42] audit: type=1400 audit(1785748019.680:828): avc: denied { bind } for pid=9497 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 150.828075][ T42] audit: type=1400 audit(1785748019.680:829): avc: denied { setopt } for pid=9497 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 150.836940][ T42] audit: type=1400 audit(1785748019.680:830): avc: denied { accept } for pid=9497 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 150.845767][ T42] audit: type=1400 audit(1785748019.680:831): avc: denied { write } for pid=9497 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 150.853996][ T42] audit: type=1400 audit(1785748019.690:832): avc: denied { read } for pid=9497 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 151.001013][ T9504] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 151.005665][ T9504] @0Ù: renamed from bond_slave_1 (while UP) [ 151.192119][ T9462] mount: server not responding, timed out [ 151.208303][ T9513] syz_tun: entered allmulticast mode [ 151.213399][ T9512] syz_tun: left allmulticast mode [ 151.933840][ T9525] syz.3.1174 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 152.371207][ T5837] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 152.530954][ T5837] usb 10-1: Using ep0 maxpacket: 16 [ 152.535319][ T5837] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.542366][ T5837] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.550563][ T5837] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 152.554153][ T5837] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.561503][ T5837] usb 10-1: config 0 descriptor?? [ 152.654771][ T5817] IPVS: starting estimator thread 0... [ 152.751059][ T9557] IPVS: using max 44 ests per chain, 105600 per kthread [ 152.879642][ T5837] usbhid 10-1:0.0: can't add hid device: -71 [ 152.884256][ T5837] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 152.893112][ T5837] usb 10-1: USB disconnect, device number 5 [ 152.899263][ T9564] bond0: (slave bridge0): Releasing backup interface [ 152.916450][ T9564] bridge_slave_0: left allmulticast mode [ 152.919023][ T9564] bridge_slave_0: left promiscuous mode [ 152.924529][ T9564] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.935690][ T9564] bridge_slave_1: left allmulticast mode [ 152.938128][ T9564] bridge_slave_1: left promiscuous mode [ 152.940817][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.955350][ T9564] bond0: (slave bond_slave_0): Releasing backup interface [ 152.961437][ T9564] bond0: (slave bond_slave_1): Releasing backup interface [ 152.967767][ T9564] team0: Port device team_slave_0 removed [ 152.972728][ T9564] team0: Port device team_slave_1 removed [ 152.975600][ T9564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.979630][ T9564] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 153.061813][ T9567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1189'. [ 153.227805][ T9573] syzkaller0: entered promiscuous mode [ 153.230427][ T9573] syzkaller0: entered allmulticast mode [ 153.255670][ T9572] create_pit_timer: 11 callbacks suppressed [ 153.255694][ T9572] kvm: requested 107276 ns i8254 timer period limited to 200000 ns [ 153.288780][ T9572] kvm: requested 31847 ns i8254 timer period limited to 200000 ns [ 153.294629][ T9572] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 153.299467][ T9572] kvm: requested 131581 ns i8254 timer period limited to 200000 ns [ 153.304743][ T9572] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 153.309223][ T9572] kvm: requested 174323 ns i8254 timer period limited to 200000 ns [ 153.315013][ T9572] kvm: requested 69561 ns i8254 timer period limited to 200000 ns [ 153.320302][ T9572] kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 153.324875][ T9572] kvm: requested 124038 ns i8254 timer period limited to 200000 ns [ 153.332468][ T9572] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 153.856901][ T9593] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 153.992266][ T9601] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1203'. [ 154.076792][ T9606] null_blk: nullb1: using native zone append [ 154.188295][ T9606] null_blk: disk nullb1 created [ 154.339443][ T9617] netlink: 'syz.2.1209': attribute type 1 has an invalid length. [ 154.357037][ T9617] bond1: entered promiscuous mode [ 154.359705][ T9617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.376606][ T9617] ipvlan2: entered allmulticast mode [ 154.379070][ T9617] bond1: entered allmulticast mode [ 154.395950][ T9617] bond1: (slave bridge4): making interface the new active one [ 154.398704][ T9617] bridge4: entered promiscuous mode [ 154.400695][ T9617] bridge4: entered allmulticast mode [ 154.404570][ T9617] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 154.733274][ T9628] syz_tun: entered allmulticast mode [ 154.809475][ T9633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1215'. [ 154.823633][ T9633] ip6gre1: entered promiscuous mode [ 154.825458][ T9633] ip6gre1: entered allmulticast mode [ 154.848328][ T9633] netlink: 'syz.5.1215': attribute type 6 has an invalid length. [ 154.853338][ T9633] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1215'. [ 154.960115][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 154.960135][ T42] audit: type=1804 audit(1785748023.820:839): pid=9640 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1218" name="/newroot/134/file0" dev="tmpfs" ino=710 res=1 errno=0 [ 154.988490][ T9640] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 154.992735][ T9640] ref_ctr increment failed for inode: 0x2c6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888035861980 [ 155.006167][ T9640] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 155.010351][ T9640] ref_ctr decrement failed for inode: 0x2c6 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888035861980 [ 155.018812][ T9640] uprobe: syz.5.1218:9640 failed to unregister, leaking uprobe [ 155.438767][ T42] audit: type=1326 audit(1785748024.300:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9661 comm="syz.3.1223" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feba999e019 code=0x0 [ 155.585497][ T9669] syzkaller0: entered promiscuous mode [ 155.587635][ T9669] syzkaller0: entered allmulticast mode [ 155.690954][ T5824] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 155.793064][ T9669] tipc: Enabled bearer , priority 0 [ 155.797171][ T9668] tipc: Resetting bearer [ 155.817830][ T9668] tipc: Disabling bearer [ 155.862935][ T5824] usb 10-1: unable to get BOS descriptor or descriptor too short [ 155.866398][ T5824] usb 10-1: not running at top speed; connect to a high speed hub [ 155.869936][ T5824] usb 10-1: config 0 has an invalid interface number: 88 but max is 0 [ 155.872700][ T5824] usb 10-1: config 0 has no interface number 0 [ 155.874685][ T5824] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 155.878657][ T5824] usb 10-1: config 0 interface 88 has no altsetting 0 [ 155.884163][ T5824] usb 10-1: language id specifier not provided by device, defaulting to English [ 155.891431][ T5824] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 155.895325][ T5824] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 155.898653][ T5824] usb 10-1: Product: syz [ 155.900380][ T5824] usb 10-1: SerialNumber: Љ [ 155.904839][ T5824] usb 10-1: config 0 descriptor?? [ 155.908581][ T9665] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 156.018642][ T9673] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1226'. [ 156.150549][ T9676] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1227'. [ 156.164022][ T5824] input: syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.88/input/input13 [ 156.165210][ T9676] vlan2: entered promiscuous mode [ 156.173726][ T9676] bridge0: entered promiscuous mode [ 156.185293][ T5824] usb 10-1: USB disconnect, device number 6 [ 156.425224][ T5810] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 156.468433][ T9679] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.575044][ T9687] syzkaller0: entered promiscuous mode [ 156.577116][ T9687] syzkaller0: entered allmulticast mode [ 156.887694][ T9699] netlink: 'syz.2.1235': attribute type 1 has an invalid length. [ 156.903946][ T9699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.921806][ T9699] bond2: (slave gretap1): making interface the new active one [ 156.925403][ T9699] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 156.940204][ T9699] selinux_netlink_send: 1785 callbacks suppressed [ 156.940225][ T9699] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9699 comm=syz.2.1235 [ 157.283440][ T9712] warning: `syz.2.1241' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 157.423542][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1243'. [ 157.573743][ T9721] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1245'. [ 157.784726][ T9729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9729 comm=syz.2.1248 [ 157.827693][ T9729] overlayfs: failed to resolve './file2': -2 [ 157.828132][ T42] audit: type=1400 audit(1785748026.690:841): avc: denied { mounton } for pid=9728 comm="syz.2.1248" path="/311/file0" dev="9p" ino=78395257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.850976][ T42] audit: type=1400 audit(1785748026.710:842): avc: denied { write } for pid=9728 comm="syz.2.1248" name="/" dev="9p" ino=78395257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.490949][ T5824] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 158.618019][ T9740] syzkaller0: entered promiscuous mode [ 158.619856][ T9740] syzkaller0: entered allmulticast mode [ 158.652666][ T5824] usb 10-1: unable to get BOS descriptor or descriptor too short [ 158.655883][ T5824] usb 10-1: not running at top speed; connect to a high speed hub [ 158.660183][ T5824] usb 10-1: config 0 has an invalid interface number: 88 but max is 0 [ 158.664000][ T5824] usb 10-1: config 0 has no interface number 0 [ 158.666676][ T5824] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 158.670756][ T5824] usb 10-1: config 0 interface 88 has no altsetting 0 [ 158.677147][ T5824] usb 10-1: language id specifier not provided by device, defaulting to English [ 158.685190][ T5824] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 158.689082][ T5824] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 158.692813][ T5824] usb 10-1: Product: syz [ 158.694414][ T5824] usb 10-1: SerialNumber: Љ [ 158.698907][ T5824] usb 10-1: config 0 descriptor?? [ 158.705713][ T9734] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 158.807447][ T9742] syzkaller0: entered promiscuous mode [ 158.809392][ T9742] syzkaller0: entered allmulticast mode [ 158.865376][ T9744] overlayfs: failed to clone upperpath [ 158.921680][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1250'. [ 158.925553][ T9734] hsr_slave_0: left promiscuous mode [ 158.928513][ T9734] hsr_slave_1: left promiscuous mode [ 159.032697][ T5824] input: syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.88/input/input14 [ 159.052049][ T5824] usb 10-1: USB disconnect, device number 7 [ 159.132357][ T9755] syz_tun: entered promiscuous mode [ 159.138738][ T9755] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 159.502712][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1268'. [ 159.546794][ T9777] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9777 comm=syz.3.1268 [ 159.805146][ T9777] veth11: entered allmulticast mode [ 159.901506][ T9777] bond9: (slave veth11): Enslaving as an active interface with an up link [ 159.954082][ T9800] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1271'. [ 159.973994][ T9783] bond9 (unregistering): (slave veth11): Releasing backup interface [ 159.985894][ T9783] bond9 (unregistering): Released all slaves [ 160.018123][ T9793] syzkaller0: entered promiscuous mode [ 160.021691][ T9793] syzkaller0: entered allmulticast mode [ 160.061300][ T9796] syzkaller0: entered promiscuous mode [ 160.066078][ T9796] syzkaller0: entered allmulticast mode [ 160.157245][ T9800] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9800 comm=syz.6.1271 [ 160.345624][ T42] audit: type=1400 audit(1785748029.210:843): avc: denied { write } for pid=9818 comm="syz.5.1276" name="strings" dev="configfs" ino=14627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.363310][ T42] audit: type=1400 audit(1785748029.210:844): avc: denied { write } for pid=9818 comm="syz.5.1276" name="functions" dev="configfs" ino=11612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.391098][ T42] audit: type=1400 audit(1785748029.240:845): avc: denied { write } for pid=9818 comm="syz.5.1276" name="c.1" dev="configfs" ino=14626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.400042][ T42] audit: type=1400 audit(1785748029.240:846): avc: denied { write } for pid=9818 comm="syz.5.1276" name="c.1" dev="configfs" ino=14626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.471159][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 160.477831][ T9819] configfs-gadget.g1 gadget.0: HOST MAC ce:12:5d:f7:21:44 [ 160.478792][ T42] audit: type=1400 audit(1785748029.340:847): avc: denied { write } for pid=9818 comm="syz.5.1276" name="c.1" dev="configfs" ino=14626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.480331][ T9819] configfs-gadget.g1 gadget.0: MAC 4a:82:e3:69:e4:be [ 160.493742][ T42] audit: type=1400 audit(1785748029.340:848): avc: denied { unlink } for pid=9818 comm="syz.5.1276" name="gser.usb0" dev="configfs" ino=39300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1 [ 160.657584][ T42] audit: type=1400 audit(1785748029.520:849): avc: denied { write } for pid=9832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.681643][ T42] audit: type=1400 audit(1785748029.530:850): avc: denied { create } for pid=9836 comm="syz.5.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 160.728668][ T42] audit: type=1400 audit(1785748029.590:851): avc: denied { write } for pid=9841 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.781219][ T9845] syzkaller0: entered promiscuous mode [ 160.783583][ T9845] syzkaller0: entered allmulticast mode [ 160.974334][ T42] audit: type=1400 audit(1785748029.840:852): avc: denied { write } for pid=9852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.076754][ T9858] bond3: (slave ip6gretap1): making interface the new active one [ 161.082861][ T9858] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 161.099095][ T9863] syzkaller0: entered promiscuous mode [ 161.101763][ T9863] syzkaller0: entered allmulticast mode [ 161.220675][ T9871] pimreg3: entered allmulticast mode [ 161.478671][ T9887] syzkaller0: entered promiscuous mode [ 161.481205][ T9887] syzkaller0: entered allmulticast mode [ 161.489930][ T9887] 0: reclassify loop, rule prio 0, protocol 700 [ 161.493039][ T9890] syzkaller0: entered promiscuous mode [ 161.493055][ T9890] syzkaller0: entered allmulticast mode [ 161.564676][ T9895] file system registered [ 161.573903][ T9895] read descriptors [ 161.587463][ T8094] ffs_data_put(): freeing [ 161.625934][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1298'. [ 161.664270][ T9899] syzkaller0: entered promiscuous mode [ 161.666140][ T9899] syzkaller0: entered allmulticast mode [ 161.727593][ T9906] syzkaller0: entered promiscuous mode [ 161.729884][ T9906] syzkaller0: entered allmulticast mode [ 161.970649][ T9925] kvm: pic: single mode not supported [ 161.974600][ T9928] ªªªªªªI¡§å!qƒú: renamed from lo (while UP) [ 162.038768][ T9923] netlink: 'syz.3.1308': attribute type 4 has an invalid length. [ 162.111485][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 162.114453][ T9934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1312'. [ 162.576578][ T9965] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1324'. [ 162.603442][ T9965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9965 comm=syz.3.1324 [ 162.922260][ T9982] syzkaller0: entered promiscuous mode [ 162.924212][ T9982] syzkaller0: entered allmulticast mode [ 163.035138][ T9986] syzkaller0: entered promiscuous mode [ 163.037109][ T9986] syzkaller0: entered allmulticast mode [ 163.922719][T10024] sctp: [Deprecated]: syz.3.1346 (pid 10024) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.922719][T10024] Use struct sctp_sack_info instead [ 163.940134][T10027] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1347'. [ 163.989121][T10027] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10027 comm=syz.5.1347 [ 164.325722][T10043] bridge_slave_0: left allmulticast mode [ 164.328306][T10043] bridge_slave_0: left promiscuous mode [ 164.331081][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.338094][T10043] bridge_slave_1: left allmulticast mode [ 164.346137][T10043] bridge_slave_1: left promiscuous mode [ 164.348785][T10043] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.360198][T10043] veth0_to_bond: left allmulticast mode [ 164.369411][T10043] veth0_to_bond: left promiscuous mode [ 164.372313][T10043] bridge1: port 2(veth0_to_bond) entered disabled state [ 164.384838][T10043] bond0: (slave bond_slave_0): Releasing backup interface [ 164.393594][T10043] bond0: (slave c@0Ù): Releasing backup interface [ 164.403715][T10043] team0: Port device team_slave_0 removed [ 164.414409][T10043] team0: Port device team_slave_1 removed [ 164.417762][T10043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.420644][T10043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.426335][T10043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.429451][T10043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.445445][T10043] veth3: left allmulticast mode [ 164.447674][T10043] veth3: left promiscuous mode [ 164.451873][T10043] bridge1: port 1(veth3) entered disabled state [ 164.466578][T10043] bond2: (slave bond3): Releasing backup interface [ 164.469352][T10043] bond2: (slave bond3): the permanent HWaddr of slave - 4e:da:df:47:86:4d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 164.481261][T10043] bond2: (slave gretap1): making interface the new active one [ 164.488599][T10043] bond2: (slave gretap1): Releasing backup interface [ 164.587884][T10047] syzkaller0: entered promiscuous mode [ 164.590324][T10047] syzkaller0: entered allmulticast mode [ 164.603541][T10047] tipc: Enabled bearer , priority 0 [ 164.607901][T10046] tipc: Resetting bearer [ 164.628063][T10046] tipc: Disabling bearer [ 164.774895][T10049] syzkaller0: entered promiscuous mode [ 164.776677][T10049] syzkaller0: entered allmulticast mode [ 165.021635][T10065] syzkaller0: entered promiscuous mode [ 165.023490][T10065] syzkaller0: entered allmulticast mode [ 165.903098][ T42] kauditd_printk_skb: 48 callbacks suppressed [ 165.903149][ T42] audit: type=1400 audit(1785748034.770:901): avc: denied { write } for pid=10101 comm="syz.3.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 166.077101][T10115] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 166.198146][ T42] audit: type=1400 audit(1785748035.060:902): avc: denied { audit_write } for pid=10127 comm="syz.5.1380" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 166.213841][T10125] syzkaller0: entered promiscuous mode [ 166.219413][T10125] syzkaller0: entered allmulticast mode [ 166.288113][T10133] netlink: 'syz.6.1382': attribute type 1 has an invalid length. [ 166.330801][T10133] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.350584][T10133] gretap2: entered promiscuous mode [ 166.360147][T10133] bond2: (slave gretap2): making interface the new active one [ 166.369366][T10133] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 166.390030][T10133] macvlan3: entered promiscuous mode [ 166.394797][T10133] macvlan3: entered allmulticast mode [ 166.397870][T10133] bond2: entered promiscuous mode [ 166.401844][T10133] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 166.406751][T10133] bond2: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 166.414123][T10133] bond2: left promiscuous mode [ 166.555888][ T42] audit: type=1400 audit(1785748035.420:903): avc: denied { read } for pid=10149 comm="syz.5.1388" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.566887][ T42] audit: type=1400 audit(1785748035.430:904): avc: denied { open } for pid=10149 comm="syz.5.1388" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 166.654716][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1390'. [ 166.680722][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1390'. [ 166.684745][T10154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1390'. [ 166.687921][ T42] audit: type=1400 audit(1785748035.550:905): avc: denied { read write } for pid=10155 comm="syz.5.1391" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 166.696223][ T42] audit: type=1400 audit(1785748035.550:906): avc: denied { open } for pid=10155 comm="syz.5.1391" path="/170/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 166.701499][ T5810] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.711937][ T5810] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.716455][ T5810] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.722906][ T5810] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.790032][T10163] UBIFS error (pid: 10163): cannot open "ubi0_0", error -19 [ 166.846351][T10147] i2c i2c-0: new_device: Instantiated device wcd9390-usbss at 0x04 [ 166.912245][T10156] smpboot: CPU 1 is now offline [ 166.967488][T10162] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 166.975384][ T0] Disabled fast string operations [ 166.977087][ T0] ------------[ cut here ]------------ [ 166.978967][ T0] alternatives_patched [ 166.978978][ T0] WARNING: arch/x86/kernel/cpu/cpuid-deps.c:127 at do_clear_cpu_cap+0x356/0x440, CPU#1: swapper/1/0 [ 166.984708][ T0] Modules linked in: [ 166.986610][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 166.990187][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 166.992324][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.995834][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 166.997806][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d d1 db 71 0f 31 ff 89 ee e8 c8 c6 59 00 85 ed 0f 84 7d fd ff ff e8 4b cc 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 35 cc 59 00 8b [ 167.004867][ T0] RSP: 0000:ffffc90000177c98 EFLAGS: 00010093 [ 167.007040][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b095c8 [ 167.009740][ T0] RDX: ffff88801eaea540 RSI: ffffffff81b095d5 RDI: ffff88801eaea540 [ 167.012300][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 167.014834][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 167.017399][ T0] R13: 0000000000000601 R14: ffffc90000177ce0 R15: ffffc90000177d80 [ 167.020811][ T0] FS: 0000000000000000(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 167.023889][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.026341][ T0] CR2: 0000000000000000 CR3: 000000000e994000 CR4: 0000000000350eb0 [ 167.029013][ T0] Call Trace: [ 167.030130][ T0] [ 167.031218][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 167.033023][ T0] ? _printk+0xcf/0x110 [ 167.034423][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 167.036278][ T0] ? early_init_intel.cold+0x129/0x1eb [ 167.038109][ T0] early_init_intel.cold+0x13f/0x1eb [ 167.039905][ T0] init_intel+0x1c/0x7b0 [ 167.041493][ T0] identify_cpu+0x8b0/0x1c30 [ 167.043045][ T0] ? __pfx_cpu_init+0x10/0x10 [ 167.044612][ T0] identify_secondary_cpu+0x178/0x270 [ 167.046424][ T0] start_secondary+0xcf/0x2d0 [ 167.047994][ T0] ? __pfx_start_secondary+0x10/0x10 [ 167.049770][ T0] common_startup_64+0x13e/0x158 [ 167.051611][ T0] [ 167.052658][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 167.055069][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(full) [ 167.058493][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 167.060544][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 167.063898][ T0] Call Trace: [ 167.065027][ T0] [ 167.066017][ T0] dump_stack_lvl+0x100/0x190 [ 167.067513][ T0] vpanic+0x552/0x970 [ 167.068798][ T0] ? __pfx_vpanic+0x10/0x10 [ 167.070286][ T0] panic+0xd1/0xe0 [ 167.071558][ T0] ? __pfx_panic+0x10/0x10 [ 167.073092][ T0] ? check_panic_on_warn+0x1f/0x90 [ 167.074836][ T0] check_panic_on_warn.cold+0x19/0x34 [ 167.076735][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 167.078418][ T0] __warn.cold+0x191/0x318 [ 167.079890][ T0] __report_bug+0x30f/0x440 [ 167.081443][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 167.083203][ T0] ? __pfx___report_bug+0x10/0x10 [ 167.084899][ T0] ? prb_read_valid+0x78/0xa0 [ 167.086497][ T0] ? __pfx_prb_read_valid+0x10/0x10 [ 167.088339][ T0] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 167.090105][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 167.091814][ T0] report_bug+0xb2/0x220 [ 167.093256][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 167.094986][ T0] handle_bug+0x16a/0x2a0 [ 167.102244][ T0] exc_invalid_op+0x17/0x50 [ 167.103751][ T0] asm_exc_invalid_op+0x1a/0x20 [ 167.105486][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 167.107402][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d d1 db 71 0f 31 ff 89 ee e8 c8 c6 59 00 85 ed 0f 84 7d fd ff ff e8 4b cc 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 35 cc 59 00 8b [ 167.113710][ T0] RSP: 0000:ffffc90000177c98 EFLAGS: 00010093 [ 167.115777][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b095c8 [ 167.118376][ T0] RDX: ffff88801eaea540 RSI: ffffffff81b095d5 RDI: ffff88801eaea540 [ 167.121166][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 167.123967][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 167.126704][ T0] R13: 0000000000000601 R14: ffffc90000177ce0 R15: ffffc90000177d80 [ 167.129489][ T0] ? do_clear_cpu_cap+0x348/0x440 [ 167.131607][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 167.133747][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 167.135940][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 167.138231][ T0] ? _printk+0xcf/0x110 [ 167.140059][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 167.142511][ T0] ? early_init_intel.cold+0x129/0x1eb [ 167.144930][ T0] early_init_intel.cold+0x13f/0x1eb [ 167.147251][ T0] init_intel+0x1c/0x7b0 [ 167.149116][ T0] identify_cpu+0x8b0/0x1c30 [ 167.150938][ T0] ? __pfx_cpu_init+0x10/0x10 [ 167.152493][ T0] identify_secondary_cpu+0x178/0x270 [ 167.154345][ T0] start_secondary+0xcf/0x2d0 [ 167.156058][ T0] ? __pfx_start_secondary+0x10/0x10 [ 167.157843][ T0] common_startup_64+0x13e/0x158 [ 167.159510][ T0] [ 167.161213][ T0] Kernel Offset: disabled [ 167.162636][ T0] Rebooting in 86400 seconds..